mcp-scraper@0.27.0
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe package is not malicious by static source evidence, but it contains an explicit user-command path that mutates an AI-agent configuration and enables a hosted MCP capability. Per policy, that warrants a warning rather than a block.
Decision evidence
public snapshot- `dist/bin/mcp-scraper-cli.js` can run `claude mcp remove/add` only under explicit `agent install claude --apply`.
- The applied registration installs this package as a user-scope MCP server, extending Claude Code capabilities.
- `dist/bin/mcp-stdio-server.js` reads its configured API key and sends MCP tool calls to `https://mcpscraper.dev/mcp`.
- `package.json` has no preinstall, install, or postinstall lifecycle hook.
- Agent configuration is opt-in, requires an explicit CLI command plus `--apply`, and supports only its own named server.
- No bidi controls were found in `dist/server-YXVSZ3T7.js`; the scanner Trojan Source signal is unsupported.
- Child-process use is bounded to explicit CLI operations and opening user-requested local reports/URLs.
- No source evidence of credential harvesting, stealth persistence, destructive actions, or remote code loading.
Source & flagged code
9 flaggedSource contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/server-YXVSZ3T7.jsView on unpkg · L10855A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/server-YXVSZ3T7.jsView on unpkgPackage contains a possible secret pattern.
dist/server-YXVSZ3T7.jsView on unpkg · L21448Findings
Affected versions and remediation
This report applies to mcp-scraper@0.27.0.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.27.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.